Juniper networks® qfx5120 fixed switch

QFX5120 ETHERNET SWITCH DATASHEET Product Description The Juniper Networks® QFX5120 Switch delivers high scale, high availability, and high performance for data center and campus deployments The QFX51[.]

QFX5120 ETHERNET SWITCH DATASHEET

Product Description

The Juniper Networks® QFX5120 Switch delivers high scale, high availability, and high performance for data center and campus deployments The QFX5120 Switch is a versatile routing and switching platform addressing higher server access speed and campus distribution use cases while offering high-density 1GbE/10GbE/25GbE and 100GbE uplinks for collapsed spine data center or campus distribution deployments

Product Options

The QFX5120 Switch includes four compact 1 U platforms—the QFX5120-48Y, the QFX5120-48YM, the QFX5120-48T, and the QFX5120-32C—that provide wire-speed packet performance, very low latency, and a rich set of Junos® operating system features

QFX5120-48Y

The QFX5120-48Y is a 25GbE/100GbE data center leaf and campus distribution switch featuring:

• 48 25GbE (SFP28)/10GbE (SFP+)/1GbE (SFP) downlink ports

• Eight 100GbE (QSFP28)/40GbE (QSFP+) uplink ports

• Up to 4 Tbps L2 and L3 performance (bidirectional), with latency as low as 800 nanoseconds

• A 2.2 GHz quad-core Intel CPU with 16 GB memory and 50 GB SSD storage Using breakout cables, each of the eight 100GbE QSFP28 ports can be broken into four 25GbE SFP28 ports, while each 40GbE quad small form-factor pluggable plus (QSFP+) transceiver ports can be broken into four 10GbE small form-factor pluggable plus (SFP+) transceiver ports, increasing the total number of supported 25GbE and 10GbE ports per switch to 80

QFX5120-48YM

The QFX5120-48YM is a 10GbE/25GbE/100GbE data center leaf and campus distribution switch featuring:

• 48 25GbE (SFP28)/10GbE (SFP+)/1GbE (SFP) downlink ports

• Eight 100GbE (QSFP28)/40GbE (QSFP+) uplink ports

• Up to 4 Tbps L2 and L3 performance (bidirectional), with latency as low as 800 nanoseconds

• Media Access Control Security (MACsec) AES-256 support across all ports

• A 2.9 GHz quad-core Intel CPU with 16 GB memory and 100 GB SSD storage

Data Sheet

Product Overview

The QFX5120 Switch delivers

rich, low latency Layer 2/Layer

EVPN-VXLAN capabilities, making it an

ideal data center top-of-rack

and distribution switch for

campus enterprise deployments.

Featuring L3 gateway

capabilities for routing between

virtualized and bare-metal

servers, the QFX5120 is

designed for extremely agile

data centers that require

support for overlay/underlay

network architectures Native

25GbE with 100GbE uplink

ports on the QFX5120-48Y and

QFX5120-48YM, 10GbE/1GbE

copper with 100GbE uplink

ports on the QFX5120-48T,

and 32 100GbE ports on the

QFX5120-32C make the

QFX5120 family ideal for

spine-and-leaf network deployments.

When using breakout cables, two of the 100GbE QSFP28 ports

(ports 50 and 52) can be broken into four 25GbE SFP28 or four

10GbE SFP+ ports, increasing the maximum number of 10GbE/

25GbE ports supported to 56 When using breakouts, the total

number of all ports on the switch, including 6x100GbE ports and

56x10/25GbE, is 62

QFX5120-48T

The QFX5120-48T is a 10GbE/100GbE data center leaf and

campus distribution switch featuring:

•48 dual-speed 1GbE/10GbE RJ-45 copper downlink ports

•Six dual-speed 100GbE (QSFP28)/40GbE (QSFP+) uplink ports

•Up to 2.16 Tbps L2 and L3 performance (bidirectional), with

latency as low as 800 nanoseconds

•A 2.2 GHz quad-core Intel CPU with 16 GB memory and 100

GB SSD storage

Using breakout cables, 40GbE QSFP+ ports 50 and 51 can be

channelized into four 10GbE SFP+ ports each, increasing the total

number of 10GbE ports per switch to 56

QFX5120-32C

The QFX5120-32C is a compact 100GbE data center

leaf-and-spine and campus distribution switch featuring:

•32 100GbE (QSFP28) or 40GbE (QSFP+) uplink ports

•A 2.2 GHz quad-core Intel CPU with 16 GB memory and 64

GB SSD storage

•Up to 6.4 Tbps L2 and L3 performance (bidirectional), with

latency as low as 800 nanoseconds

Using breakout cables, 100GbE QSFP28 ports 0-30 can be

channelized into four 25GbE SFP28 ports*, and the 40GbE QSFP+

ports 0-30 can be channelized into four 10GbE SFP+ ports,

increasing the total number of 25GbE per switch to 124 and the

total number of 10GbE ports per switch to 126 (including SFP+

ports 32 and 33) Port 31 does not support 4x10G or 4x25G

channelization options Only 100GbE, 40GbE, and 2x50GbE

channelization options are supported on port 31

In addition, all QFX5120 switch models include:

•Support for VXLAN as an L2 or L3 gateway

•Advanced Junos OS features such as Ethernet VPN-Virtual

Extensible LAN (EVPN-VXLAN), BGP add-path, L3 VPN, and

MPLS

•Feature-rich automation capabilities with support for Python

and zero-touch provisioning (ZTP)

Junos OS

The high-performance QFX5120 Switch runs Junos OS, Juniper’s powerful and robust network operating system that powers all Juniper switches, routers, and firewalls Key Junos OS features that enhance the functionality and capabilities of the QFX5120 include:

•Software modularity, with process modules running independently in their own protected memory space and with the ability to do process restarts

•Uninterrupted routing and forwarding, with features such as nonstop active routing (NSR) and nonstop bridging (NSB)

•Commit and rollback functionality that ensures error-free network configurations

•A powerful set of scripts for on-box problem detection, reporting, and resolution

Data Center Deployments

Data centers demand high-speed, low-latency, storage- and I/O-converged networking solutions that maximize performance for physical servers, virtual servers, and storage The QFX5120 Switch addresses these issues with low-latency, lossless, high-density 10GbE, 25GbE, and 100GbE interfaces on a compact 1 U platform

In addition, the QFX5120 offers EVPN-VXLAN L2 and L3 gateway support, making it an ideal solution for either edge routed or centrally routed overlay deployments in the data center The QFX5120 also supports flexible back-to-front and front-to-back airflow cooling options, ensuring consistency with server designs for hot-aisle or cold-aisle deployments

Data Center Server Access

The QFX5120-48Y and QFX5120-48YM support tri-speed 1GbE/ 10GbE/25GbE, making them a perfect fit for top-of-rack

deployments The 48 ports of native 10GbE/25GbE for server connectivity, plus up to eight 40GbE or 100GbE ports for uplink connectivity, provide very low oversubscription of 1.5:1 from access to aggregation

The QFX5120-48T supports dual-speed 1GbE/10GbE, also making

it a perfect fit for top-of-rack deployments The 48 native 10GbE RJ-45 copper ports for server connectivity, plus up to six 40GbE or 100GbE ports for uplink connectivity, provide an unsubscribed (0.8:1) access-to-aggregation ratio

The QFX5120-32C can also be used for high-density 25GbE server connectivity, with an option to break out the 100GbE ports into four 25GbE ports

QFX5120 Ethernet Switch Datasheet

In Figure 1, the QFX5120 is deployed as a leaf acting as an

edge-routed gateway In this topology, the VXLAN tunnel encapsulation

and decapsulation take place on the QFX5120 leaf switches, while

Juniper Networks QFX5200-32C or Juniper Networks

QFX5210-64C spine switches are used for IP transit Juniper

Networks QFX5110-32Q switches can also be used in the spine to

build a 40GbE fabric

Figure 1: Edge-routed bridging at the leaf with QFX5200-32C/QFX5210-64C as spine

switches

In Figure 2, the QFX5120-48YM leaf and Juniper Networks

QFX10008 Switch spine are deployed as EVPN-VXLAN switches

acting as centrally routed gateways or distributed edge-routed

gateways If centrally routed bridging is used, the VXLAN tunnel

encapsulation and decapsulation occur on the spine switches for

inter-IRB (integrated routing and bridging) symmetric routing

purposes If edge-routed bridging is used, the IP first hop gateways

are distributed at the leaf-level QFX5120-48YM switches using

Type 5 symmetric inter-IRB routing When using a

QFX10000-30C-M QFX10000-30C-MACsec line card installed in a spine QFX10008 Switch working

with a leaf QFX5120-48YM switch, the leaf-to-spine architecture

offers end-to-end MACsec AES-256 capabilities

Figure 2: QFX5120-48T and QFX5120-48Y/48YM in a leaf-and-spine deployment

Data Center Spine

The QFX5120-32C, with 32 ports of 100GbE, can serve as the spine in small to medium-sized enterprise data centers The QFX5120-32C can be deployed in a three-stage IP Clos with EVPN-VXLAN overlay to support as many as 1500 server access ports The QFX5120-48Y/QFX5120-48YM and QFX5120-32C can also be used as a collapsed spine data center deployment, offering Ethernet segment identifier-link aggregation group (ESI-LAG) connectivity to the rest of the network infrastructure blocks All QFX5120 switches can operate in both cut-through and store-and-forward modes, delivering sustained wire-speed switching with sub-microsecond latency and low jitter for any packet size

(including jumbo frames) in either mode With features such as multichassis link aggregation (MC-LAG), the QFX5120 supports active/active server dual-homing and can use full bisectional bandwidth from server to switch

Equipped with Junos OS, the QFX5120 supports the most advanced and robust routing capabilities in the industry, OSPF for both IPv4 and IPv6, as well as advanced routing capabilities such as IS-IS and BGP With additional capabilities such as 64-way equal-cost multipath (ECMP) and BGP add path, the QFX5120 is an ideal building block for deploying the most robust L3 underlay for SDN

QFX5120 Ethernet Switch Datasheet

Campus Deployments

Juniper campus fabrics provide a single, standards-based Ethernet

VPN-Virtual Extensible LAN (EVPN-VXLAN) solution that can be

deployed in any campus, whether a two-tier network with a

collapsed core distribution or a campus-wide system that involves

multiple buildings with separate distribution and core layers

The QFX5120-48Y and QFX5120-48YM are ideal as campus

distribution switches with 10GbE/25GbE downlinks and 40GbE/

100GbE uplinks supporting technologies like MC-LAG and EVPN

multihoming

The QFX5120-32C is ideal as a campus core switch with 32 ports

of 100GbE and support for technologies like campus fabric

core-distribution

The QFX5120-48T supports dual-speed 1GbE/10GbE, also making

it a perfect fit for top-of-rack deployments in campus environments

for server connectivity

Juniper campus fabrics support the following validated

architectures:

•MC-LAG and EVPN Multihoming (Collapsed Core/

Distribution): A pair of interconnected QFX5120 switches can

be deployed to provide EVPN multihoming (ESI-LAG) or

multichassis link aggregation (MC-LAG) in a collapsed core/

distribution configuration This eliminates the need for

Spanning Tree Protocol (STP) across the campus network by

providing multihoming capabilities from the access to the

distribution layer, while distribution to the core is an L3 IP fabric ESI-LAG also supports horizontal scaling with more than two devices in the distribution layer and can extend EVPN to the core

•Campus Fabric Core-Distribution: A pair of interconnected

QFX5120 switches can provide EVPN L2 and L3 VXLAN gateway support This eliminates the need for STP across the campus network by providing a multihoming capability from the access to the distribution layer, while distribution to the core is an L3 IP fabric using EVPN technology The IP fabric can also extend to connect multiple enterprise buildings, while VXLAN allows stretching of L2 across buildings An IP Clos network between the distribution and the core layers can exist

in two modes, both of which are supported by the QFX5120:

- Centrally routed bridging overlay: An IRB interface

placed at a central location in the fabric (in this case, a core device)

- Edge routed bridging overlay: An IRB interface placed at

the edge of the fabric (in this case, a distribution device)

•Campus Fabric IP Clos: The Campus Fabric IP Clos

architecture pushes VXLAN Layer 2/3 gateway functionality to the access layer In this architecture, the QFX5120 switch acts

as an IP fabric distribution switch

Figure 3: QFX5120 as distribution and core in EVPN multihoming and campus fabric architectures

QFX5120 Ethernet Switch Datasheet

Features and Benefits

• Automation: The QFX5120 supports a number of network

automation and plug-and-play operational features, including

ZTP and event scripts, automatic rollback, and Python

scripting

• Flexible forwarding table: The QFX5120 includes a unified

forwarding table, which allows the hardware table to be carved

into configurable partitions of L2 media access control (MAC),

L3 host, and longest prefix match (LPM) tables In a pure L2

environment, the QFX5120 supports 288,000 MAC

addresses In L3 mode, the table can support 208,000 host

entries In LPM mode, it can support 351,000 prefixes Junos

OS provides configurable options through a CLI that can

optimize the QFX5120 for various deployment scenarios

• Intelligent buffer management: The QFX5120 features a total

of 32 MB of shared buffers While 25% of the total buffer

space is dedicated, the rest is shared among all ports and is

user configurable The intelligent buffer mechanism in the

QFX5120 effectively absorbs traffic bursts while providing

deterministic performance, significantly increasing

performance over static allocation

• MPLS: A broad set of MPLS features, including L3 VPN, IPv6

provider edge router (6PE), RSVP traffic engineering, and LDP,

allow standards-based network segmentation and

virtualization, enabling the QFX5120 to be deployed as a low

latency MPLS label-switching router (LSR)

• VXLAN overlays: The QFX5120 switch is capable of both L2

and L3 gateway services Customers can deploy overlay

networks to provide L2 adjacencies for applications over L3

fabrics The overlay networks use VXLAN in the data plane

and EVPN or Open vSwitch Database (OVSDB) for

programming the overlays

• MACsec and hop-by-hop encryption: The QFX5120-48YM

supports IEEE 802.1AE MACsec AES-256, providing link-layer

data confidentiality, data integrity, and data origin

authentication The MACsec feature enables the

QFX5120-48YM to support 2 Tbps of near line-rate

hardware-based traffic encryption on all 100GbE, 40GbE,

25GbE, 10GbE, and 1GbE ports Defined by IEEE 802.1AE,

MACsec provides secure, encrypted communication at the link

layer that is capable of identifying and preventing threats from

denial-of-service (DoS) and intrusion attacks, as well as

man-in-the-middle, masquerading, passive wiretapping, and playback

attacks launched from behind the firewall When MACsec is

deployed on switch ports, all traffic is encrypted on the wire,

but traffic inside the switch is not This allows the switch to

apply network capabilities such as quality of service (QoS) and

sFlow to each packet without compromising the security of packets on the wire

In addition, Ethernet-based WAN networks can use MACsec to provide link security over long haul connections MACsec is transparent to Layer 3 and higher layer protocols and is not limited

to IP traffic; it works with any type of wired or wireless traffic carried over Ethernet links

• Virtual chassis: The QFX5120 supports Juniper Networks’

unique virtual chassis technology, which enables up to two interconnected switches to operate as a single, logical device with a single IP address This technology allows campus enterprises to eliminate STP and efficiently utilize network links QFX5120-48Y (starting with Junos 19.3), QFX5120-32C (staring with Junos 20.3) and QFX5120-48T (starting with Junos 20.2) support virtual chassis Note: QFX5120-48YM does not support virtual chassis at this time; this feature is reserved for a future release

Management, Monitoring, and Analytics

Data Center Fabric Management: Juniper Apstra provides

operators with the power of intent-based network design to help ensure changes required to enable data center services can be delivered rapidly, accurately, and consistently Operators can further benefit from the built-in assurance and analytics capabilities

to resolve Day 2 operations issues quickly

Apstra Key Features

• Automated deployment and zero-touch deployment

• Continuous fabric validation

• Fabric lifecycle management

• Troubleshooting using advanced telemetry For more information on Apstra, see https://

www.juniper.net/us/en/products/network-automation/apstra/ apstra-system.html

Campus Fabric Management: Juniper Mist Cloud

Juniper Mist Wired Assurance brings cloud management and Mist

AI to campus fabrics It sets a new standard moving away from traditional network management towards AI-driven operations, while delivering better experiences to connected devices

•Automated deployment and Zero Touch Deployment

•Anomaly detection

•Root cause analysis For more information on Mist Wired Assurance, see https:// www.juniper.net/us/en/products/cloud-services/wired-assurance.html

QFX5120 Ethernet Switch Datasheet

Paragon Insights (formerly HealthBot)

Combining the power of telemetry, programmability, advanced

algorithms, and machine learning, Juniper® Paragon Insights

(formerly HealthBot) delivers the following features and benefits for

enhanced monitoring and analytics:

•Key performance indicator collection and visualization

•Anomaly detection

•Root cause analysis

•Automated remediation

•Multivendor support

•Customizable playbooks

•JTI telemetry

For more information on Paragon Insights, see https://

www.juniper.net/content/dam/www/assets/datasheets/us/en/

network-automation/paragon-insights.pdf

Junos Telemetry Interface

The QFX5120 switch supports Junos telemetry interface (JTI), a

modern telemetry streaming tool designed for performance

monitoring in complex, dynamic data centers Streaming data to a

performance management system enables network administrators

to measure trends in link and node utilization and troubleshoot such

issues as network congestion in real time JTI delivers the following

features:

•Application visibility and performance management by

provisioning sensors to collect and stream data and analyze

application and workload flow paths through the network

•Capacity planning and optimization by proactively detecting

hotspots and monitoring latency and microbursts

•Troubleshooting and root cause analysis via high-frequency

monitoring and correlation of overlay and underlay networks

QFX5120 Switch Specifications Hardware

Switching Capacity

•QFX5120-48Y: 4 Tbps (bidirectional)/2 Bpps

•QFX5120-48YM: 4 Tbps (bidirectional)/2 Bpps

•QFX5120-48T: 2.16 Tbps (bidirectional)/1 Bpps

•QFX5120-32C: 6.4 Tbps (bidirectional)/2 Bpps

•Switching mode (all models): Cut-through and store-and-forward

Weight

•QFX5120-48Y: 23.7 lb (10.75 kg)

•QFX5120-48YM: 24.8 lb (11.25 kg)

•QFX5120-48T: 24.25 lb (11 kg)

•QFX5120-32C: 21.12 lb (9.58 kg)

Dimensions (H x W x D)

•QFX5120-48Y: 1.72 x 17.36 x 20.48 in (4.37 x 44.09 x 52.02 cm)

•QFX5120-48YM: 1.72 x 17.36 x 20.48 in (4.37 x 44.09 x 52.02 cm)

•QFX5120-48T: 1.72 x 17.36 x 20.48 in (4.37 x 44.09 x 52.02 cm)

•QFX5120-32C: 1.7 x 17.26 x 20.27 in (4.32 x 43.84 x 51.5 cm)

Power Consumption

•QFX5120-48Y

- Max load: 272 W

QFX5120 Ethernet Switch Datasheet

- Typical load: 247 W

•QFX5120-48YM

- Max load: 351 W

- Typical load: 329 W

•QFX5120-48T

- Max load: 218 W

- Typical load: 213 W

•QFX5120-32C

- Max load: 310 W

- Typical load: 291 W

Airflow

•Front-to-back (airflow out) for hot aisle deployment

•Back-to-front (airflow in) for cold aisle deployment

Interface Options

•QFX5120-48Y

- 2 management ports: 2 x RJ-45 ports

- 1GbE SFP: 48

- 10GbE SFP+: 48/80(with breakout cable)

- 25GbE SFP: 48/80 (with breakout cable)

- 40GbE QSFP+: 8 (each QSFP+ port can be configured as

a 4 x 10GbE interface or as a 40 Gbps port)

- 100GbE QSFP28: 8 (each QSFP28 port can be

configured as a 4 x 25GbE interface or as a 100 Gbps

port)

- SFP GbE optical and copper module

- SFP+ 10GbE optical modules

- SFP+ direct attach copper (DAC) cables: 1/3/5 m twinax

copper and 1/3/5/7 m active twinax copper

- SFP28 DAC cables: 1/3 m twinax copper

- SFP28 optics: Short reach (SR), long reach (LR)

- QSFP+ to SFP+: 10GbE direct attach breakout copper

(1/3 m twinax copper cable)

•QFX5120-48YM

- 2 management ports: 2 x RJ-45 ports

- 1GbE SFP: 48

- 10GbE SFP+: 48/56 (total of 56 ports with breakout

cable on port 50 and 52)

- 25GbE SFP: 48/56 (total of 56 ports with breakout cable

on port 50 and 52)

- 40GbE QSFP+: 8 (QSFP+ port 50 and 52 can be

configured as a 4 x 10GbE interface or as a 40 Gbps port)

- 100GbE QSFP28: 8 (QSFP28 port 50 and 52 can be

configured as a 4 x 25GbE interface or as a 100 Gbps

port)

- SFP GbE optical

- SFP+ 10GbE optical modules

- SFP+ DAC cables: 1/3/5 m twinax copper and 1/3/5/7 m active twinax copper

- SFP28 DAC cables: 1/3 m twinax copper

- SFP28 optics: Short reach (SR), long reach (LR)

- QSFP+ to SFP+: 10GbE direct attach breakout copper (1/3 m twinax copper cable)

•QFX5120-48T

- 1 management port: 1 x RJ-45 port

- 1GbE RJ45 (copper): 48 (each port is dual speed supporting 1GbE/10GbE)

- 40GbE QSFP+: 6 (ports 50 and 51 can be configured as a

4 x 10GbE interface or as 40 Gbps interfaces)

- 100GbE QSFP28: 6 (ports 50 and 51 can be configured

as a 4 x 25GbE interface or as 100 Gbps interfaces)

•QFX5120-32C

- 1 RJ-45 in-band management port

- 10GbE SFP+: 2 native ports plus 124 (with 4 x 10GbE breakout cable)

- 25GbE SFP: 124 (with breakout cable)

- 40GbE QSFP+: 32 (ports 0-31 can be configured as a 4 x 10GbE interface)

- 100GbE QSFP28: 32 (ports 0-31 can be configured as a 4

x 25GbE interface)

- SFP+ 10GbE optical modules

- SFP+ DAC cables: 1/3/5 m twinax copper and 1/3/5/7 m active twinax copper

- SFP28 DAC cables: 1/3 m twinax copper

- SFP28 optics: SR, LR

- QSFP+ to SFP+: 10GbE direct attach breakout copper (1/3 m twinax copper cable)

Common to All Models

•1 USB 2.0 port

•1 RS-232 console port

•Supported transceiver and direct attach cable

- QSFP+ DAC cables: 1/3 m twinax copper

- QSFP+ optics: SR4, LX4, ESR4, ER4, LR4

- QSFP28 optics: SR4, ER4, PSM4, CWDM4, LR4

•Versatile four post mounting options for 19-in server rack or datacom rack

Airflow

•Redundant (N+1) and hot-pluggable fan modules for front-to-back and front-to-back-to-front airflow

•Redundant variable-speed fans to reduce power draw

QFX5120 Ethernet Switch Datasheet

Power Supply and Fan Modules

•Dual redundant (1+1) and hot-pluggable 650 W AC/DC power

supplies

•100-240 V single phase AC power

•-48 to -60 V DC power supply

•Redundant 4+1 (QFX5120-48Y/YM and QFX5120-48T) or

5+1 (QFX5120-32C) and hot-pluggable fan modules for

front-to- back or back-front-to-front airflow

Performance Scale (Unidimensional)

•MAC addresses per system: 288,000

•VLAN IDs: 4093

•Number of link aggregation groups (LAGs):

- 80 (QFX5120-48Y/YM, QFX5120-32C)

- 64 (QFX5120-48T)

•Number of ports per LAG: 64

•IPv4 unicast routes: 351,000 prefixes; 208,000 host routes; 64

ECMP paths

•IPv4 multicast routes: 104,000

•IPv6 unicast routes: 168,000 prefixes; 104,000 host routes

•IPv6 multicast routes: 52,000

•Address Resolution Protocol (ARP) entries: 64,000

•Jumbo frame: 9216 bytes

•Spanning Tree Protocol (STP)

•Multiple Spanning Tree Protocol (MSTP) instances: 64

•VLAN Spanning Tree Protocol (VSTP) instances: 509

•Traffic mirroring

- Mirroring destination ports per switch: 4

- Maximum number of mirroring sessions: 4

- Mirroring destination VLANs per switch: 4

Software Features Supported

Layer 2 Features

•STP—IEEE 802.1D (802.1D-2004)

•Rapid Spanning Tree Protocol (RSTP) (IEEE 802.1w); MSTP

(IEEE 802.1s)

•Bridge protocol data unit (BPDU) protect

•Loop protect

•Root protect

•RSTP and VSTP running concurrently

•VLAN—IEEE 802.1Q VLAN trunking

•Routed VLAN interface (RVI)

•Port-based VLAN

•Private VLAN (PVLAN)

•VLAN translation

•Static MAC address assignment for interface

•Per VLAN MAC learning (limit)

•MAC learning disable

•Link Aggregation and Link Aggregation Control Protocol (LACP) (IEEE 802.3ad)

•MACsec with AES256 (QFX5120-48YM only)

•Virtual chassis—up to 2 members on QFX5120-48Y, QFX5120-32C and QFX5120-48T

Link Aggregation

•MC-LAG

•LAG load sharing algorithm—bridged or routed (unicast or multicast) traffic

•IP: Session Initiation Protocol (SIP), Dynamic Internet Protocol (DIP), TCP/UDP source port, TCP/UDP destination port

•Layer 2 and non-IP: MAC SA, MAC DA, Ethertype, VLAN ID, source port

Layer 3 Features (IPv4)

•Static routing

•Routing protocols (RIP, OSPF, IS-IS, BGP)

•Virtual Router Redundancy Protocol (VRRP)

•Virtual router

•Dynamic Host Configuration Protocol (DHCP) relay

•Proxy Address Resolution Protocol (ARP)

EVPN-VXLAN Features

•MAC virtual routing and forwarding (MAC-VRF) multiple EVPN instances (EVI) with service-types based, aware, vlan-bundle

•Symmetric inter-IRB routing with anycast gateway and EVPN type-5 instances

•Proxy IGMPv2—EVPN route types 6/7/8

•ARP/ND proxy/suppression

•ESI-LAG A/A multihoming using Enterprise and SP-style interfaces

•Enhanced Ethernet loop detection

•Filter-based forwarding on IRB.VGA

•EVPN advanced route policing

•VLAN-id overlapping using SP-style interfaces

•VLAN rewrite support in EVPN-VXLAN enterprise-style

•(EP-style) interfaces – vlan-id overlap in EP-style interfaces

•OISM - draft-ietf-bess-evpn-irb-mcast

•VLAN rewrite support in EVPN-VXLAN enterprise-style

•(EP-style) interfaces – vlan-id overlap in EP-style interfaces

QFX5120 Ethernet Switch Datasheet

Multicast Features

•Internet Group Management Protocol (IGMP): v1, v2, v3

•IGMP snooping: v1, v2, and v3 (Layer 2 only)

•IGMP filter

•Protocol Independent Multicast-Sparse Mode (SM),

PIM-Source-Specific Multicast SSM), PIM-Dense Mode

(PIM-DM) in pure IP fabric use case

•Multicast Source Discovery Protocol (MSDP)

Security and Filters

•Secure interface login and password

•RADIUS

•TACACS+

•Ingress and egress filters: Allow and deny, port filters, VLAN

filters, and routed filters, including management port filters

•Filter actions: Logging, system logging, reject, mirror to an

interface, counters, assign forwarding class, permit, drop,

police, mark

•SSH v1, v2

•Static ARP support in pure IP fabric

•Storm control, port error disable, and autorecovery

•Source MAC address filtering on the port

•DHCP snooping in pure IP fabric use case

Quality of Service (QoS)

•L2 and L3 QoS: Classification, rewrite, queuing

•Rate limiting:

- Ingress policing: Single-rate two-color policer, two-rate

three-color policer

- Egress policing: Policer, policer mark down action

- Egress shaping: Per queue on each port

•10 hardware queues per port (8 unicast and 2 multicast)

•Strict-priority queue (SPQ), shaped-deficit weighted

round-robin (SDWRR), weighted random early detection (WRED),

weighted tail drop

•802.1p remarking

•Layer 2 classification criteria: Interface, MAC address,

Ethertype, 802.1p, VLAN

•Congestion avoidance capabilities: WRED

•Trust IEEE 802.1p (ingress)

•Remarking of bridged packets

•Default inner to outer DiffServ code point (DSCP) copy for

EVPN-VXLAN

IP Storage

•Priority-based flow control (PFC)—IEEE 802.1Qbb, DCBX

•PFC using DSCP and explicit congestion notification (ECN) for ROCEv2

High Availability

•Bidirectional Forwarding Detection (BFD)

•Uplink failure detection

MPLS

•Static label-switched paths (LSPs)

•RSVP-based signaling of LSPs

•LDP-based signaling of LSPs

•LDP tunneling (LDP over RSVP)

•MPLS class of service (CoS)

•MPLS LSR support

•IPv6 tunneling (6PE) (via IPv4 MPLS backbone)

•IPv4 L3 VPN (RFC 2547, RFC 4364)

Management and Analytics Platforms

•Apstra Intent-based System for Data Center

•Juniper Mist Wired Assurance for Campus

•Junos Space® Network Director for Campus

• Paragon Insights

Device Management and Operations

• Role-based CLI management and access

• CLI via console, telnet, or SSH

• Extended ping and traceroute

• Junos OS configuration rescue and rollback

• Image rollback

• SNMP v1/v2/v3

• Junos XML management protocol

• sFlow v5

• Beacon LED for port and system

• Inband Flow Analyzer (IFA)

• ZTP

• OpenStack Neutron Plug-in

• Python

• Junos OS event, commit, and OP scripts

• JTI

Traffic Mirroring

• Port-based

QFX5120 Ethernet Switch Datasheet

•LAG port

•VLAN-based

•Filter-based

•Mirror to local

•Mirror to remote destinations (L2 over VLAN)

Standards Compliance

IEEE Standard

•IEEE 802.1D

•IEEE 802.1w

•IEEE 802.1

•IEEE 802.1Q

•IEEE 802.1p

•IEEE 802.1ad

•IEEE 802.3ad

•IEEE 802.1AB

•IEEE 802.3x

•IEEE 802.1Qbb

•IEEE 802.1Qaz

T11 Standards

•INCITS T11 FC-BB-5

Supported RFCs

•RFC 768 UDP

•RFC 783 Trivial File Transfer Protocol (TFTP)

•RFC 791 IP

•RFC 792 ICMP

•RFC 793 TCP

•RFC 826 ARP

•RFC 854 Telnet client and server

•RFC 894 IP over Ethernet

•RFC 903 RARP

•RFC 906 TFTP Bootstrap

•RFC 951 1542 BootP

•RFC 1058 Routing Information Protocol

•RFC 1112 IGMP v1

•RFC 1122 Host requirements

•RFC 1142 OSI IS-IS Intra-domain Routing Protocol

•RFC 1256 IPv4 ICMP Router Discovery Protocol (IRDP)

•RFC 1492 TACACS+

•RFC 1519 Classless Interdomain Routing (CIDR)

•RFC 1587 OSPF not-so-stubby area (NSSA) Option

•RFC 1591 Domain Name System (DNS)

•RFC 1745 BGP4/IDRP for IP—OSPF Interaction

•RFC 1772 Application of the Border Gateway Protocol in the Internet

•RFC 1812 Requirements for IP Version 4 Routers

•RFC 1997 BGP Communities Attribute

•RFC 7348 VXLAN—Virtual extensible Local Area Network

•RFC 8365 NVO—Network Virtualization Overlay Solution Using Ethernet VPN (EVPN-VXLAN)

•OISM - EVPN Optimized Inter-Subnet Multicast (OISM) Forwarding - draft-ietf-bess-evpn-irb-mcast

•IGMP and MLD Proxy for EVPN - draft-ietf-bess-evpn-igmp-mld-proxy

•RFC 2030 SNTP, Simple Network Time Protocol

•RFC 2068 HTTP server

•RFC 2131 BOOTP/DHCP relay agent and Dynamic Host

•RFC 2138 RADIUS Authentication

•RFC 2139 RADIUS Accounting

•RFC 2154 OSPF with Digital Signatures (Password, MD-5)

•RFC 2236 IGMP v2

•RFC 2267 Network ingress filtering

•RFC 2328 OSPF v2 (edge mode)

•RFC 2338 VRRP

•RFC 2362 PIM-SM (edge mode)

•RFC 2370 OSPF Opaque LSA Option

•RFC 2385 Protection of BGP Sessions via the TCP MD5 Signature Option

•RFC 2439 BGP Route Flap Damping

•RFC 2453 RIP v2

•RFC 2474 Definition of the Differentiated Services Field (DS Field) in the IPv4 and IPv6 Headers

•RFC 2597 Assured Forwarding PHB (per-hop behavior) Group

•RFC 2598 An Expedited Forwarding PHB

•RFC 2697 A Single Rate Three Color Marker

•RFC 2698 A Two Rate Three Color Marker

•RFC 2796 BGP Route Reflection—An Alternative to Full Mesh IBGP

•RFC 2918 Route Refresh Capability for BGP-4

•RFC 3065 Autonomous System Confederations for BGP

•RFC 3376 IGMP v3 (source-specific multicast include mode only)

•RFC 3392 Capabilities Advertisement with BGP-4

•RFC 3446 Anycast RP

•RFC 3569 SSM

•RFC 3618 MSDP

•RFC 3623 Graceful OSPF Restart

•RFC 4271 Border Gateway Protocol 4 (BGP-4)

•RFC 4360 BGP Extended Communities Attribute

•RFC 4456 BGP Route Reflection: An Alternative to Full Mesh Internal BGP (IBGP)

QFX5120 Ethernet Switch Datasheet